blob: f78551fa3bcac8170025c7a9b104e64e163615f3 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
# Based on https://github.com/pi-hole/FTL/blob/bc185680fc2af2f7e21bd120f56749051207914f/test/pihole.toml
[misc]
# Put configuration into read-only mode. This will prevent any changes to the
# configuration file via the API or CLI. This setting useful when a configuration is
# to be forced/modified by some third-party application (like infrastructure-as-code
# providers) and should not be changed by any means.
readOnly = false
[dns]
# Array of upstream DNS servers used by Pi-hole
# Example: [ "8.8.8.8", "127.0.0.1#5335", "docker-resolver" ]
upstreams = {{ pihole_dns }}
domainNeeded = true # Never forward plain names (without dots or domain parts)
expandHosts = true # Add the domain to simple names in /etc/hosts
domain = "lan" # Local domain name
bogusPriv = true # Don't forward reverse DNS queries for private IP ranges
dnssec = false # Validate DNS replies using DNSSEC
port = 53 # Port used by the DNS Server
# Network interface Pi-hole should listen on
# Usually "eth0" for Ethernet or "wlan0" for WiFi
interface = "{{ pihole_interface }}"
# Pi-hole interface listening modes
# - "LOCAL" (default)
# Allow only local requests. This setting accepts DNS queries only from hosts
# whose address is on a local subnet.
# - "SINGLE"
# Permit all origins, accept only on the specified interface. Respond only to
# queries arriving on the specified interface.
# - "BIND"
# By default, FTL binds the wildcard address.
# - "ALL"
# Permit all origins, accept on all interfaces. Make sure your Pi-hole is firewalled.
# - "NONE"
# Do not add any configuration concerning the listening mode to the dnsmasq config file.
listeningMode = "LOCAL"
{% if pihole_dns_hosts | length > 0 %}
hosts = {{ pihole_dns_hosts | to_json }}
{% endif %}
[dns.cache]
size = 10000 # Cache size of the DNS server.
[dns.blocking]
# Master switch for Pi-hole's blocking functionality
active = {{ pihole_dns_blocking_enabled | lower }}
[dhcp]
active = {{ pihole_dhcp_enabled | lower }}
{% if pihole_dhcp_enabled %}
start = "{{ pihole_dhcp_start }}"
end = "{{ pihole_dhcp_end }}"
router = "{{ pihole_dhcp_router }}"
leaseTime = "{{ pihole_dhcp_lease_time }}"
domain = "{{ pihole_dhcp_domain }}"
hosts = {{ pihole_dhcp_hosts | to_nice_json }}
{% endif %}
[webserver]
{% if (pihole_domain is defined) and (pihole_domain != '') %}
domain = "{{ pihole_domain }}"
{% endif %}
{% if (pihole_port is defined) and (pihole_port != '') %}
port = "{{ pihole_port }}o"
[webserver.tls]
cert = ""
{% else %}
port = "80,443s"
[webserver.tls]
cert = "/etc/pihole/tls.pem"
{% endif %}
[webserver.paths]
webhome = "/admin/"
[webserver.api]
pwhash = "{{ pihole_password }}" # valid double hashed string
totp_secret = "{{ pihole_totp_secret }}" # valid TOTP secret (20 Bytes in Base32 encoding)
|
